By Anna Delaney (annamadeline)
With AI adoption and new regulations like the EU AI Act, CISOs face increasing liability and litigation risks in 2025, according to attorney Jonathan Armstrong. He outlined strategies to manage compliance, secure supply chains, and protect against legal challenges in an evolving threat landscape.
AI’s role in cybersecurity is growing, but so are its vulnerabilities and compliance challenges. “If you’re using gig-economy, outsourced workers for AI, or your suppliers are, then that’s another point of vulnerability,” said Armstrong, partner at Punter Southall Law. He noted these risks arise from “the fact that anyone building AI applications will have access to large amounts of data.”
With regulatory frameworks like the EU AI Act taking effect, organizations face stricter requirements. “How can you be transparent about where data is being processed if you don’t know? You’re unlikely to know unless you make it a contractual requirement,” he said. He urged leaders to conduct supplier audits, implement due diligence, and ensure compliance with evolving regulations to mitigate risks and avoid litigation.
In a video interview with Information Security Media Group, Armstrong discussed:
Compliance challenges under regulations like the EU AI Act;
AI vulnerabilities tied to supply-chain and outsourcing risks;
Legal and strategic safeguards for data protection and AI security.
Armstrong is a lawyer specializing in compliance and technology. He is regarded as one of the foremost cybersecurity experts and is active in advising clients on GDPR compliance and AI risks and opportunities.
